Xerox FreeFlow Manuel de sécurité - Page 9

Parcourez en ligne ou téléchargez le pdf Manuel de sécurité pour {nom_de_la_catégorie} Xerox FreeFlow. Xerox FreeFlow 38 pages. For color 560/570 printer
Également pour Xerox FreeFlow : Manuel d'installation (34 pages), Brochure (2 pages), Note de mise à jour (23 pages), Manuel d'installation (2 pages), Note de mise à jour (33 pages), Important Installation Information (2 pages), Manuel de l'utilisateur (50 pages), Manuel (18 pages), Manuel de connexion rapide (2 pages), Manuel de procédures des transporteurs (28 pages)

Imprimer la page

Enable and disable services

System Service

Allow_host.equiv_plus

Anonymous FTP

BSM

Executable Stacks

Hide Info Banners

Multicast Routing

Remote CDE Logins

Restrict DFS tab

Restrict NFS Portmon

Router

Secure File

Permissions

Security Guide

The following tables provide a list of the services that can be

enabled and disabled from the Xerox FreeFlow Print Server

"Setup > Security Profiles" menu options.

NOTE: Services list may vary, depending on the product.

Table 2-2

"System" tab

Background: The /etc/hosts.equiv and /.rhosts files provide the remote

authentication database for rlogin, rsh, rcp, and rexec. The files

specify remote hosts and users that are considered to be trusted.

Trusted users are allowed to access the local system without

supplying a password. These files can be removed or modified to

enhance security. The Xerox FreeFlow Print Server is provided with

both of these files deleted entirely. The setting All_host.equiv_plus is

set to disabled, then anytime that security settings are applied, the +

will be removed from host.equiv. IMPORTANT NOTE: Removing the +

from the hosts.equiv file will prevent the use of the Xerox command

line client print from remote clients. An alternative would be to remove

the + and add the name of each trusted host that requires this

functionality. Leaving the + will allow a user from any remote host to

access the system with the same username

Enable or disable the Basic Security Module (BSM) on Solaris

Some security exploits take advantage of the Solaris OE kernel

executable system stack to attack the system. Some of these exploits

can be avoided by making the system stack non-executable. The

following lines are added to /etc/system/fP file:set

noexec_user_stack=1set noexec_user_stack_log=1

Deny all remote access (direct/broadcast) to the X server running on

the Xerox FreeFlow Print Server by installing an appropriate /etc/dt/

config/Xaccess file.

Disable router mode by creating an empty the empty file: /etc/

notrouter.

Description